Process 2: Initiate the Change

Published: April 25, 2008   |   Updated: October 10, 2008

 

After baselining the configuration, you can initiate the change.

Cc543239.image4(en-us,TechNet.10).jpg

Figure 4. Initiate the change

Activities: Initiate the Change

Change requests can come from many sources, including:

All change requests need to be evaluated for impact and benefit to the organization.

The following table lists the activities involved in initiating the change. These include:

  • Initiating an RFC.
  • Checking the technical configuration.
  • Checking the business process and application configuration.
  • Identifying the business impact and assess the risk.
  • Updating the RFC.

Table 5. Activities and Considerations for Initiating the Change

Activities

Considerations

Initiate a request for change (RFC)

Key questions:

  • What kind of information is to be included in the change description? For example, the service that will be affected, the business benefit, and the exact description of the configuration items to be changed.
  • Who can initiate a change? Can anyone in the organization initiate a change?
  • How will the RFC be categorized and tracked?
  • Does each service maintain its own set of RFCs?
  • How are RFCs interlinked and cross-referenced?
  • Is there a specific RFC for common or standard changes?

Inputs:

  • Request for a change
  • Description of the change

Output:

  • New RFC

Best practices:

  • Keep RFC forms as simple as possible while capturing sufficient information to manage risk.
  • The RFC should be continually updated throughout the process; it can be initiated without a thorough analysis or detailed information about the change and then updated later. It is important to have easy access to the RFC so that additions to it can be made. Additionally, organizations can use role authentication to ensure that read and write access is applied at the right time during the process. Determine who should have permission to read or change the RFC in each process.
  • The organization can streamline the RFC process by using pre-populated fields and drop-down lists for information such as the type of change, the service affected by the change, and the applicable technology.
  • There should be a point of contact for each change request. This can be the Change Manager or the change initiator. The point of contact should have access to the most recent history, understand the technical and resource implications, and appreciate how this change will affect other planned changes and the day-to-day work of the business.  
  • Do not confuse the RFC process with a Service Desk request. The latter is a request for such things as existing services or questions about existing services, and is handled through the Customer Service SMF. An RFC is completed by the IT group to ensure that changes to the production environment are well thought out and planned.
  • Ensure that the RFC form is self-explanatory and that it is clear how to seek assistance, if needed, for completing the form.

Check the technical configuration

Key questions:

  • Has the RFC identified all CIs that will be affected or that will require a change?
  • How many actual CIs will be affected? If this is a global change such as a software update, is there an accurate account of all services or production devices that will be affected?
  • When looking at the configuration database information, are there additional CIs that may be affected?

Inputs:

  • CIs
  • Service map
  • Impacted services gathered from the RFC

Output:

  • CIs impacted by the RFC

Check the business process and application configuration

Key questions:

  • What business processes are potentially affected by this proposed change?
  • What will need to change to accommodate this RFC?
  • What applications will be affected by this RFC?
  • Which users and business groups need to know about this change?

Best practices:

  • Dependencies on business processes and functionality must be identified. If you change the workflow or how the application is used, the business must be involved to identify impacts.
  • Consider services, process, and impacted applications when considering what communications are required.

Identify the business impact and assess the risk

Key questions:

  • How will the organization benefit from the change? If the change is not done, is there a potential risk to the organization? 
  • How will the business justification or impact be explained and quantified? For example, if a change is requested to increase the demand of a particular service, the demand can be expressed in terms of capacity data or an upcoming business event.
  • What are the risks associated with this change?

Inputs:

  • Request for a change
  • Identification of the IT service and business group impacted by the change

Output:

  • Documentation of a clearly stated business reason and the impact and risk of the change request

Best practice: